Sr Principal, Cybersecurity Program Governance & Reporting Lead

About Northern Trust:

Northern Trust, a Fortune 500 company, is a globally recognized, award-winning financial institution that has been in continuous operation since 1889.  

Northern Trust is proud to provide innovative financial services and guidance to the world’s most successful individuals, families, and institutions by remaining true to our enduring principles of service, expertise, and integrity. With more than 130 years of financial experience and over 22,000 partners, we serve the world’s most sophisticated clients using leading technology and exceptional service.

Role Description

Northern Trust seeks a Cybersecurity Program Governance & Reporting Lead to oversee project governance, executive status reporting, delivery methodology compliance, new project intake and prioritization, and risk and issue management across a large portfolio of Cybersecurity projects. This role reports directly to the Head of Cybersecurity Strategic Program Delivery.

Major Duties

Governance & Reporting:

• Chair bi-weekly meetings with program delivery staff to align priorities, disseminate important updates, and conduct knowledge sharing.

• Direct and oversee creation of executive-level status reports for monthly, quarterly, and ad-hoc leadership committees and regulatory reporting stakeholders.

• Work with Cybersecurity Portfolio leads on key messaging including progress highlights and areas requiring leadership attention.

Project Intake & Prioritization:

• Oversee the new project request process, including mapping of projects to strategic goals and relevant industry frameworks (e.g., Cyber Risk Institute, MITRE ATT&CK, NIST) as well as calculating project prioritization scores according to a defined methodology; maintain and update project scoring methodology annually.

• Review and advise on new project requests and project change controls to ensure they are ready for leadership review, evaluation, and decisioning.

• Chair bi-weekly prioritization meetings and related preparatory discussions with key stakeholders to ensure efficient review, challenge and decisioning.

Portfolio Risk & Issue Management:

• Facilitate office hours sessions with project execution staff to help identify risks, issues, and dependencies; review and analyze thematic risks, issues, and dependencies and provide recommendations to Cybersecurity Program Delivery leadership to affect improvements.

• Develop and provide guidance on common risk mitigation strategies and issue resolution.

Product/Capability Ownership:

• Serve as product owner and subject matter expert for Cybersecurity Program Delivery team PowerBI reporting dashboards that project status, project financials, staffing, and milestones.

• Consult with internal business intelligence teams and shared platform owners to ensure compliance with uptime and performance requirements.

• Oversee the prioritization of enhancements and defect resolution and indirectly manage the development team for delivery.

Communications, Organizational & Enterprise Change Management:

• Consult with Northern Trust’s Enterprise Change Management and Technology Organizational Change Management teams to understand requirements and best practices.

• Serve as expert advisor to project managers to ensure cybersecurity projects are compliant with best practices and standards.

• Manage internal cybersecurity communication resource and partner with internal communications teams to develop all project-related email and multi-channel communications plans and content.

• Manage internal cybersecurity technical writing resource to assist with drafting standard project documentation including scope, requirements, and standard operating procedures.

Financial Management & Governance:

• Lead the development of capital and expense budget requests on behalf of the Cyber Program Delivery team.

• Serve as liaison to finance stakeholders for the purposes of accurate monthly forecasting and variance review for projects within the portfolio.

Knowledge, Skills & Experience Required:

A successful candidate for the role will have at least 10 years of experience in project delivery, financials management and governance. Additionally, the candidate will possess:

• Experience in establishing and overseeing governance for technology project portfolios; knowledge of and experience working in software delivery lifecycle methodologies (e.g., Agile/ Scrum, Waterfall, etc.)